# Changelog

## 2026-09-19

- distill.md runs Deduplicate before Validate. Pass 1 is now 1.1 Deduplicate,
  1.2 Validate, 1.3 The demotion pass, 1.4 Classify, 1.5 Cross-lens conflict
  resolution, so reading code is paid once per weakness rather than once per
  reviewer that noticed it.
- Every row of the Pipeline Map carries an id. The orchestrator assigns ids to
  reviewers before launch, each reviewer returns a `## Coverage` table over its
  ids, and distill prints the ids nobody read and the ids assigned to nobody.

## 2026-09-11

- Added the skill with six lenses: `pipeline-integrity`, `reproducibility`, `packaging`, `artifact-provenance`, `dependency-licenses`, `pipeline-waste`,
  plus `agent.md`, `distill.md` and `scan-steps.md`.